MCP Bill of Materials
A machine-readable inventory of what this server exposes and depends on: tools with their effects, transports, packages, findings and provenance (schema version 1.0). Third-party text in it is escaped. Also available from the REST API at /api/v1/servers/2d347ec1-4d8e-4cff-a0de-4ea0c383bd44/mcbom.
MCP Bill of Materials
root{21}
schema_version: "1.0"
bom_format: "squatch-mcbom"
generator{3}
name: "squatch-mcp"
classifier_version: "rules_v1@2026-10-11.1"
unicode_version: "18.0.0"
server{7}
name: "estate.cubi/cubi-properties"
title: "Cubi Estate"
description: "Search 2.5M+ homes to buy or rent in 17 European countries. Compare prices, history, similar homes."
version: "1.0.2"
homepage_url: "https://www.cubi.estate"
source: "official_registry"
upstream_status: "active"
publisher{4}
namespace: "estate.cubi"
display_name: "estate.cubi"
type: "registry_namespace"
status: "unclaimed"
organization: null
repository: null
packages[0]
transports[1]
0{5}
kind: "remote"
type: "streamable-http"
endpoint_url: "https://mcp.cubi.estate/mcp"
endpoint_host: "mcp.cubi.estate"
auth_type: "none"
auth{3}
type: "none"
authorization_servers[0]
scopes[0]
protocol{4}
era: "legacy"
negotiated_version: "2025-11-25"
supported_versions[0]
transport_type: "streamable-http"
tools[12]
0{9}
name: "compare_asking_prices"
title: "Compare asking prices"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "2bc984756f769f92a3e49a5734ee96dd8bfab8525b798a4262dfa33fc5429557"
input_schema_fingerprint: "0ed300473c54998c0e0cd870d4afa3aa58ffc953bc8bb6607d99ff4be321f043"
annotations{5}
title: "Compare asking prices"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
1{9}
name: "compare_inventory"
title: "Compare what a budget buys"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "0d481b569395ce4f4c46b46395a2fbf1039f7b8b62cefdbba454f063e0db90eb"
input_schema_fingerprint: "8a29dae0292c6d8e02aea4ee2be1da2c8e154b218b2eca1dad3c6b4d6b4529c6"
annotations{5}
title: "Compare what a budget buys"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
2{9}
name: "corpus_stats"
title: "Corpus statistics"
effect: "READ"
effect_confidence: 0.524
capabilities[0]
risk_severity: "INFO"
fingerprint: "632d2e7fa885910688baf48fa2d42c0b1f6f60ab850b34bedc41795c2beb1fa8"
input_schema_fingerprint: "ef6788f35be4fc774ea638386406c37ec7afe856f1ddbc0b0eae88fbec8fd68c"
annotations{5}
title: "Corpus statistics"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
3{9}
name: "data_layer_stats"
title: "Data-layer coverage"
effect: "READ"
effect_confidence: 0.595
capabilities[0]
risk_severity: "INFO"
fingerprint: "a117a80507cc465b00af521d757be68e6b96b7b03aa97e6d12675cfe882e7645"
input_schema_fingerprint: "a826fea1b6e8cf5819e37228e62c2835ee439d6d4833d9b63d528986d0e945ff"
annotations{5}
title: "Data-layer coverage"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
4{9}
name: "filter_listings"
title: "Filter listings"
effect: "READ"
effect_confidence: 0.796
capabilities[0]
risk_severity: "INFO"
fingerprint: "1eef16bf306953fc9b3ad14363e94d658c9195d3f52a9f6347cb123df54bec30"
input_schema_fingerprint: "c1130dc6e822b6a573343970cdc69049b9e6ec4e96f38b89639a21e326060ae3"
annotations{5}
title: "Filter listings"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
5{9}
name: "find_similar_elsewhere"
title: "Find similar homes in another city"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "c6123f588bd5a73e0141b776ad32d1c809f4bc7e6a647d55b294920d0d4bcd1c"
input_schema_fingerprint: "fcbe24e48e728e849b06b49ffbb55a46c5a97367b8ea96218035e93821ef170f"
annotations{5}
title: "Find similar homes in another city"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
6{9}
name: "find_similar_homes"
title: "Find similar homes nearby"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "80f20556e9931de0aa276a3e3d3ae1ffacf7ba7c256194ed9b59d863048008eb"
input_schema_fingerprint: "7b3f16b18ff66490109106202b7e1e68ac820777d4e807136e91186739ed15c8"
annotations{5}
title: "Find similar homes nearby"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
7{9}
name: "get_contact_options"
title: "Get contact options"
effect: "READ"
effect_confidence: 0.879
capabilities[1]
0{2}
capability: "PERSONAL_DATA"
confidence: 0.724
risk_severity: "LOW"
fingerprint: "98b0feb4ecc539b0d0ddbb37e6cde477f52cec17dd74da9296ac71e2ed4015bc"
input_schema_fingerprint: "8277d1093826aad634c99032bec404b09c0250aec8f2631ffb2c6b3e3eda27bd"
annotations{5}
title: "Get contact options"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
8{9}
name: "get_daily_new_listing_stats"
title: "Daily new-listing statistics"
effect: "READ"
effect_confidence: 0.798
capabilities[0]
risk_severity: "INFO"
fingerprint: "9075e80be5cf68355a5d65a7a7da6da666040ca0b789a6bf932196c14d663061"
input_schema_fingerprint: "2a978e272e522f33f19772f10f4a9c9385d0d32fb4a97e0b6e122b69b8d3b568"
annotations{5}
title: "Daily new-listing statistics"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
9{9}
name: "get_listing"
title: "Get listing details"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "31d38891346fe468b338c4b80bad77926037bcf1891c7f306f0c562b545e217d"
input_schema_fingerprint: "e33715ade1edaf142a7b3af51a460abff732c20a974d30b6bc6957369abb8830"
annotations{5}
title: "Get listing details"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
10{9}
name: "get_price_history"
title: "Get price history"
effect: "READ"
effect_confidence: 0.879
capabilities[0]
risk_severity: "INFO"
fingerprint: "015ad2ff4f69df30cefa401fb8ad571afce029ae213eb5935ff33ef52521b179"
input_schema_fingerprint: "b0915a33e42e751523f75adda56e368b2e58d16251bf08f0b83291d563f1f2de"
annotations{5}
title: "Get price history"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
11{9}
name: "search_properties"
title: "Search properties"
effect: "READ"
effect_confidence: 0.933
capabilities[0]
risk_severity: "INFO"
fingerprint: "db6ff08dbe1548104e2b47bd72f73f6caf87eecf4af7f1268c2ffc99c2e010f8"
input_schema_fingerprint: "a941883152821ebd6aa8efc1d424168f30e53c566492c432ce56a18559965203"
annotations{5}
title: "Search properties"
readOnlyHint: true
destructiveHint: false
idempotentHint: null
openWorldHint: false
resources[1]
0{4}
key: "ui://widget/property-listings.html"
kind: "resource"
mime_type: "text/html;profile=mcp-app"
fingerprint: "e00834391e9851e2767f558f5e805b547031d49e318174421e4b1045fbc87409"
prompts[0]
extensions[0]
data{6}
privacy_completeness: "not_provided"
data_categories[0]
ai_training: null
retention_policy: null
processing_regions[0]
subprocessors[0]
external_integrations[1]
0{3}
host: "mcp.cubi.estate"
registrable_domain: "cubi.estate"
source: "transport"
findings[4]
0{6}
check_id: "SQ-REPO-MISSING"
category: "provenance"
severity: "LOW"
title: "No source repository linked"
subject_type: "server"
subject_name: null
1{6}
check_id: "SQ-TOOL-CROSS-TOOL-REFERENCE"
category: "prompt_injection"
severity: "MEDIUM"
title: "Gives instructions about other tools"
subject_type: "tool"
subject_name: "filter_listings"
2{6}
check_id: "SQ-TOOL-EXFIL-DIRECTIVE"
category: "prompt_injection"
severity: "CRITICAL"
title: "Asks the AI model to pass conversation data or secrets"
subject_type: "tool"
subject_name: "search_properties"
3{6}
check_id: "SQ-TOOL-INJECTION-INSTRUCTIONS"
category: "prompt_injection"
severity: "CRITICAL"
title: "Instructions addressed to the AI model"
subject_type: "tool"
subject_name: "search_properties"
trust{9}
registry_namespace: "verified_upstream"
publisher_identity: "unverified"
organization: "unverified"
domain: "unverified"
repository: "not_provided"
source_provenance: "unknown"
security_scan: "findings_detected"
privacy_transparency: "not_provided"
monitoring: "active"
provenance{4}
registry_name: "estate.cubi/cubi-properties"
registry_content_sha256: "ba39fc8abec37883ddb78ca10065198e72b5fee3dfb0f958f41383eb9be407f4"
scan_snapshot_fingerprint: "ab6fff2109752a305560710008a62233160d074aebb2f9e93e7a47f2e1494c13"
scanner_version: "1.0.0"
timestamps{4}
generated_at: "2026-11-15T06:05:47.752Z"
observed_at: "2026-11-08T15:57:49.334+00:00"
registry_published_at: "2026-11-08T15:15:52.601287+00:00"
registry_updated_at: null